Adding Apache's plugin support

This plugin supports issuing/renewing certificates without needing
to stop/start Apache's daemon.

This change also adds a variable to allow override default letsencrypt
config directory (/etc/letsencrypt).
This commit is contained in:
Alberto Bengoa
2019-06-18 16:17:39 +01:00
parent 7efc6a50f5
commit e0adf71570
5 changed files with 34 additions and 4 deletions
+9
View File
@@ -0,0 +1,9 @@
---
- name: Check if certificate already exists.
stat:
path: "{{ certbot_config_dir }}/live/{{ cert_item.domains | first | replace('*.', '') }}/cert.pem"
register: letsencrypt_cert
- name: Generate new certificate if one doesn't exist.
command: "{{ certbot_create_command }}"
when: not letsencrypt_cert.stat.exists
+1 -1
View File
@@ -1,7 +1,7 @@
---
- name: Check if certificate already exists.
stat:
path: /etc/letsencrypt/live/{{ cert_item.domains | first | replace('*.', '') }}/cert.pem
path: "{{ certbot_config_dir }}/live/{{ cert_item.domains | first | replace('*.', '') }}/cert.pem"
register: letsencrypt_cert
- name: Stop services to allow certbot to generate a cert.
+4
View File
@@ -2,6 +2,10 @@
- name: Install Certbot.
package: "name={{ certbot_package }} state=present"
- name: Install Certbot Extra Packages.
package: "name={{ certbot_extra_packages }} state=present"
when: certbot_extra_packages | length > 0
- name: Set Certbot script variable.
set_fact:
certbot_script: "{{ certbot_package }}"
+8
View File
@@ -15,5 +15,13 @@
loop_control:
loop_var: cert_item
- include_tasks: create-cert-apache.yml
with_items: "{{ certbot_certs }}"
when:
- certbot_create_if_missing
- certbot_create_method == 'apache'
loop_control:
loop_var: cert_item
- import_tasks: renew-cron.yml
when: certbot_auto_renew